$ rpki-client -vvvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: wVm1fo2ER5eEd4PmdPRVXNPhVkCIpQMTlb8Gxy3WdWk= Subject key identifier: 06:FC:2E:E3:07:2F:2C:0F:22:55:A9:6D:A5:0A:F3:DA:A7:0D:C5:E2 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1CD4 Signing time: Tue 06 Oct 2026 16:11:29 +0000 Manifest this update: Tue 06 Oct 2026 16:11:29 +0000 Manifest next update: Tue 13 Oct 2026 16:11:29 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: qZna0T2Gzp9mEngHnMXRt0k2jCDGLM8yCIAAcKuPiSQ=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7417 (0x1cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Oct 6 16:11:29 2026 GMT Not After : Oct 13 16:11:29 2026 GMT Subject: CN=6ac51db1-6a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:db:ae:d3:bd:20:09:ba:67:90:45:9e:6c: 3f:9a:f5:d4:5c:cb:49:58:58:df:dd:e2:fe:3e:ce: a6:8d:0c:13:63:8c:0f:a9:de:c6:bd:64:a0:de:f5: e9:ed:16:2c:ee:26:5f:f7:88:b4:e9:4e:4c:6a:62: 51:cd:97:7d:ea:1a:58:59:c4:78:c7:c3:21:6f:f8: 8c:40:d9:cc:a7:33:a4:a7:ca:26:4d:b9:88:cb:e9: 95:a9:23:dc:48:f6:61:5e:2c:37:fb:c1:21:48:83: 77:38:e0:0c:2c:83:a8:42:69:20:f1:90:d4:3d:e7: 62:af:62:d6:ea:7e:12:d3:df:a0:77:0a:ec:4e:bf: 6d:37:9b:31:1e:83:ee:54:d2:f1:78:52:5c:c4:c0: 60:d2:b3:c5:fb:25:ab:2f:72:e6:a1:95:05:c6:3d: 52:b0:c1:ef:08:47:78:d9:dc:c8:d0:3f:c1:60:7f: 15:2c:bb:bd:0d:e9:4a:c1:16:0e:10:b1:34:24:fe: 6a:a3:d4:3d:94:60:6f:5c:ae:2d:46:15:b6:50:fa: b3:8e:8d:58:f7:80:9f:b4:22:65:56:f2:c4:b5:11: a8:cc:ac:a4:54:89:2e:3d:4e:bd:2a:f6:0b:c8:90: 32:cd:2d:49:28:63:59:b0:e2:b8:03:20:ff:b6:06: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FC:2E:E3:07:2F:2C:0F:22:55:A9:6D:A5:0A:F3:DA:A7:0D:C5:E2 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:18:72:f7:19:63:e5:11:81:84:81:1a:79:86:da:24:2b:ea: 26:6b:33:98:73:ed:99:62:68:1e:4b:22:1d:08:25:05:e1:72: 1c:df:63:83:ef:10:b3:13:71:1f:03:43:bd:17:ba:fa:9a:59: c8:5c:bd:23:cd:c2:2f:75:f5:f1:7c:a1:a9:51:0e:76:a9:b4: 2c:05:e2:47:10:23:0d:71:f4:82:d8:76:fd:61:c4:ae:23:be: f3:68:3b:2c:8b:94:c1:84:80:6a:bb:0f:0f:87:7a:ac:e7:39: 6a:07:70:71:fa:8f:c5:ad:ff:18:62:55:2b:31:48:0c:33:4d: 0e:69:d4:23:47:74:6a:88:b1:e0:80:70:7c:dc:45:9f:74:c5: 53:a6:d6:2e:69:d8:4d:f9:bc:bc:70:40:e1:a1:60:b0:e4:43: 7b:e7:ee:e8:1a:a6:1e:43:3b:1c:d0:7d:78:1a:e6:25:f2:54: 2b:da:4d:10:5d:1b:ce:d4:1b:a9:1f:bb:11:2c:b6:40:44:2c: 90:22:30:06:fd:c2:27:96:6b:f6:2d:bc:89:20:22:d6:4d:fa: b7:7f:f5:63:7f:29:aa:13:3a:d3:39:fe:95:47:96:d8:67:dc: 63:77:2b:29:83:ab:2f:6d:41:54:db:c0:18:a5:36:88:34:36: 61:d7:33:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYxMDA2MTYxMTI5WhcNMjYxMDEzMTYxMTI5WjAYMRYwFAYD VQQDEw02YWM1MWRiMS02YTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQvbrtO9IAm6Z5BFnmw/mvXUXMtJWFjf3eL+Ps6mjQwTY4wPqd7GvWSg3vXp 7RYs7iZf94i06U5MamJRzZd96hpYWcR4x8Mhb/iMQNnMpzOkp8omTbmIy+mVqSPc SPZhXiw3+8EhSIN3OOAMLIOoQmkg8ZDUPedir2LW6n4S09+gdwrsTr9tN5sxHoPu VNLxeFJcxMBg0rPF+yWrL3LmoZUFxj1SsMHvCEd42dzI0D/BYH8VLLu9DelKwRYO ELE0JP5qo9Q9lGBvXK4tRhW2UPqzjo1Y94CftCJlVvLEtRGozKykVIkuPU69KvYL yJAyzS1JKGNZsOK4AyD/tgaMTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb8LuMH LywPIlWpbaUK89qnDcXiMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxhy9xlj5RGBhIEaeYbaJCvqJmszmHPtmWJoHksiHQglBeFyHN9jg+8QsxNx HwNDvRe6+ppZyFy9I83CL3X18XyhqVEOdqm0LAXiRxAjDXH0gth2/WHEriO+82g7 LIuUwYSAarsPD4d6rOc5agdwcfqPxa3/GGJVKzFIDDNNDmnUI0d0aoix4IBwfNxF n3TFU6bWLmnYTfm8vHBA4aFgsORDe+fu6BqmHkM7HNB9eBrmJfJUK9pNEF0bztQb qR+7ESy2QEQskCIwBv3CJ5Zr9i28iSAi1k36t3/1Y38pqhM60zn+lUeW2GfcY3cr KYOrL21BVNvAGKU2iDQ2YdczSQ== -----END CERTIFICATE-----Generated at Thu Oct 8 18:03:55 2026 by rpki-client